[Samba] win2003 member netlogon.

Johan Hendriks Johan at double-l.nl
Wed Nov 5 14:46:20 GMT 2008


>Hi Johan

>I tried to do the same thing, but I was less successful.

>Can you give a configuration file for your samba setup?  I was stuck =
add
>getting my users authenticated against my samba domain controller =
(although
>my pc was registered in my domain)

>Thanks

>steven

Here are my config files
I used the samba3 by example, it it all Works very well, I also use a =
ldap backend.
The only thing that has a error is the nsswitch.conf file in the by =
example doc, it tells you to use ldap but you must use winbind.
My config is from a FreeBSD 7.1 PRERELEASE machine.
If you leave out the ldap settings you should be able to use the tdb =
backend.
My win2003 server is server01 my Samba server is server02

What is important is the /etc/krb5.conf file and the /etc/nsswitch.conf =
file

#########################################################
#/usr/local/etc/smb.conf file
#########################################################

[global]
workgroup =3D SMBDOMAIN
realm =3D SMBDOMAIN.LOCAL
netbios name =3D server02
interfaces =3D bce0 lo0
server string =3D %L
security =3D ads
# ldap backend
ldap admin dn =3D cn=3DManager,dc=3Dsmbdomain,dc=3Dlocal
ldap idmap suffix =3D ou=3DIdmap
ldap suffix =3D dc=3Dsmbdomain,dc=3Dlocal
idmap backend =3D ldap:ldap://ldap.smbdomain.local
# end ldap backend
idmap uid =3D 5000-100000
idmap gid =3D 5000-100000
template homedir =3D /usr/home/%U
template shell =3D /bin/sh
#winbind cache time =3D 3600
#winbind nested groups =3D yes
winbind use default domain =3D yes
winbind separator =3D +
winbind enum users =3D yes
winbind enum groups =3D yes
#password server =3D server01.smbdomain.local
#wins server =3D server01.smbdomain.local
socket options =3D TCP_NODELAY SO_RCVBUF=3D8192 SO_SNDBUF=3D8192
use sendfile =3D yes
local master =3D no
domain logons =3D no
domain master =3D no
preferred master =3D no
dns proxy =3D no
username map =3D /usr/local/samba/usermap
nt acl support =3D yes

# Printing
load printers =3D yes
printing =3D cups
printcap name =3D cups

# LOGGING
syslog only =3D Yes
log file =3D /var/log/samba/%m
loglevel =3D 1 ads:10 auth:10 sam:10 rpc:10
#log level =3D 3
max log size =3D 1000
syslog =3D 2

# logon options
        logon script =3D logon.bat
#       logon path =3D \\%L\profiles\%u
        logon path =3D
        logon home =3D \\server02\%U
        logon drive =3D H:

#=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D Share Definitions =
=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=3D=
=3D=3D=3D=3D=3D

[homes]
root preexec =3D /usr/local/samba/scripts/firslogon
   comment =3D Home Directories
   valid users =3D SMBDOMAIN+%S
   read only =3D no
   browseable =3D no

[Data]
   comment =3D Data
   path =3D /usr/local/samba/data
   browseable =3D yes
   writeable =3D yes
   create mode =3D 0755
   directory mode =3D 0755


#########################################################
#/etc/krb5.conf file  (Capitol letters are important)
#########################################################

[libdefaults]
        default_realm =3D SMBDOMAIN.LOCAL
        clockskew =3D 300
[realms]
        SMBDOMAIN.LOCAL =3D {
                kdc =3D server01.smbdomain.local
   }

[domain_realm]
        .smbdomain.local =3D SMBDOMAIN.LOCAL

#########################################################
#/etc/nsswitch.conf file =20
# The important stuff is group: and passwd:
#########################################################

#
# nsswitch.conf(5) - name service switch configuration file
# $FreeBSD: src/etc/nsswitch.conf,v 1.1 2006/05/03 15:14:47 ume Exp $
#
group: files winbind
group_compat: nis
hosts: files dns
networks: files
passwd: files winbind
passwd_compat: nis
shells: files
services: compat
services_compat: nis
protocols: files
rpc: files

Hope this helps.

Regards,
Johan

No virus found in this outgoing message.
Checked by AVG - http://www.avg.com=20
Version: 8.0.175 / Virus Database: 270.8.6/1769 - Release Date: =
5-11-2008 7:17


More information about the samba mailing list